Dapp safety checksPreview
Paste a link. Sotto opens it on a sealed cloud computer with a brand new wallet and records everything the site tries to do.
What happens during a check
- Start a sealed browser
A fresh cloud computer that is wiped when the test ends.
- Make a brand new wallet
Funded with a little gas and nothing else.
- Open the site and connect
Sotto clicks through the main actions, like connect, mint or claim.
- Record and simulate
Every request, signature and approval is captured, and transactions are simulated to see what would actually move.
- Report and wipe
You get a verdict with the evidence, and the computer and test wallet are destroyed.
What gets checked
| Check | What Sotto looks for |
|---|---|
| Approvals | Unlimited token approvals, the classic wallet-drainer pattern |
| Contracts | Whether contracts are verified on the explorer, and how new they are |
| Domain | How old the domain is and whether it imitates a known site |
| Network requests | Where the page sends your wallet details |
| Simulation | Whether anything moves beyond what the page promises |
Verdicts
Next steps from the browser
When a check finishes, the bar under the sealed browser offers what makes sense next: mint or claim with a burner, open the site live, or test again. Use the expand button, or double-click the browser bar, to see the site large while the report stays on the right.
A safe verdict is a strong signal, not a guarantee. For anything new, use a burner wallet with only what you need.